From: Adam Chlipala <adamc@hcoop.net>
Date: Tue, 17 Feb 2009 16:46:03 +0000 (+0000)
Subject: ACL check on reusers requests
X-Git-Tag: release_2010-11-19~13
X-Git-Url: https://git.hcoop.net/hcoop/domtool2.git/commitdiff_plain/072a71cf252c43fa9a6db1595cf92af3ac6f8cab?ds=sidebyside

ACL check on reusers requests
---

diff --git a/src/main.sml b/src/main.sml
index ac9207d..f19dd8a 100644
--- a/src/main.sml
+++ b/src/main.sml
@@ -1604,8 +1604,13 @@ fun service () =
 				      (fn () => ())
 
 			       | MsgReUsers =>
-				 doIt (fn () => (usersChanged ();
-						 ("Users change callbacks run", NONE)))
+				 doIt (fn () => if Acl.query {user = user, class = "priv", value = "regen"}
+						   orelse Acl.query {user = user, class = "priv", value = "all"} then
+						    (usersChanged ();
+						     ("Users change callbacks run", NONE))
+						else
+						    ("Unauthorized user asked to reusers!",
+						     SOME "You aren't authorized to regenerate files."))
 				      (fn () => ())
 
 			       | _ =>